CVE-2024-31267

CVE-2024-31267 is a high-severity Missing Authorization vulnerability affecting WP Desk Flexible Checkout Fields for WooCommerce versions up to and including 4.1.2. This flaw allows an authenticated attacker to bypass authorization controls, potentially leading to high impact on confidentiality, integrity, and availability of the affected system. With a CVSS score of 8.8, the attack requires low privileges and no user interaction, making it easily exploitable. Currently, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.